General

  • Target

    647ffda07d4dd5c2ac5428bb2fa07733_JaffaCakes118

  • Size

    29.9MB

  • MD5

    647ffda07d4dd5c2ac5428bb2fa07733

  • SHA1

    8252510a4f0a9e7fe28a49db08b73eb49e55699d

  • SHA256

    07f59d27a68b147f1146f64b98aaf25e846f2709b0f8b36309561652968f5ea5

  • SHA512

    687dec92d366704dd5c796c90050cb9db4ab7a15a41cfe0d4ee7c06a499146a91d4426bd2a9b0a5d461a5f685c1ef3ae111549dc5962bcd7c97042a4137d56bd

  • SSDEEP

    393216:gd2d1tZvIpjlS8BjnXumoCirIwk24txINFgaYmFgpUxoTj2ZrMKykQgRdFwVKNe/:wbS8Bz3x22KrY6QUxoTSlVwVW7obE9g

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • 647ffda07d4dd5c2ac5428bb2fa07733_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    bd0641e21b10edfc0a54866bde1ee66c


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Setup.exe
    .exe windows:5 windows x86 arch:x86

    bd0641e21b10edfc0a54866bde1ee66c


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LinkButton.dll
    .dll windows:5 windows x86 arch:x86

    0b13a0800f2601c8945258e2533ea47e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsWindows$_16_.dll
    .dll windows:4 windows x86 arch:x86

    6281e52b0c4bb0e07b335d86fc902d2e


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/winhttp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    86660019029121b29ff1b3398c0c83d4


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Origin.VisualElementsManifest.xml
  • $TEMP/Origin.exe
    .exe windows:5 windows x86 arch:x86

    87c2f22aaa051eea5d178e91d7470c6d


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/OriginUninstall.exe
    .exe windows:5 windows x86 arch:x86

    bd0641e21b10edfc0a54866bde1ee66c


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $TEMP/installerdll$_18_.dll
    .dll windows:6 windows x86 arch:x86

    8589b681a58a114a4159340d97a8ae29


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/WindowsInstaller-KB893803-v2-x86.exe
    .exe windows:6 windows x86 arch:x86

    f676e16c67a815430fbcd6d520ece6e4


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/installerdll$_18_.dll
    .dll windows:6 windows x86 arch:x86

    8589b681a58a114a4159340d97a8ae29


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/rootsupd.exe
    .exe windows:5 windows x86 arch:x86

    1494de9b53e05fc1f40cb92afbdd6ce4


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/vcredist_x64_vs2013.exe
    .exe windows:5 windows x86 arch:x86

    dcbe94b8cc54b8e53867c61cc96811d6


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/vcredist_x86_vs2013.exe
    .exe windows:5 windows x86 arch:x86

    dcbe94b8cc54b8e53867c61cc96811d6


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/installerdll$_16_.dll
    .dll windows:6 windows x86 arch:x86

    8589b681a58a114a4159340d97a8ae29


    Code Sign

    Headers

    Imports

    Exports

    Sections